[RESOLVED] - Couldn't refresh data adapter- Lookup table issue

Hi all,

I created a lookup table with a csv file and I get the issue:

“Couldn’t refresh data adapter”

So my lookup table doesn’t work at all. It is suppose to resolve an ip and put it in a specific field.

Do you have any idea to troubleshoot this issue and make it work ?

Many thanks,

Check the logs of your Graylog node(s).
:arrow_right: http://docs.graylog.org/en/2.4/pages/configuration/file_location.html


I did, ''Couldn’t refresh data adapter" came from my log file.

2018-06-05T12:01:41.489+02:00 ERROR [LookupDataAdapter] Couldn't refresh data adapter <switches_lookup_cache/5b11622368cb5c7ed8af88f4/@7793c60d>
java.lang.NullPointerException: null
        at org.graylog2.lookup.adapters.CSVFileDataAdapter.doRefresh(CSVFileDataAdapter.java:102) ~[graylog.jar:?]
        at org.graylog2.plugin.lookup.LookupDataAdapter.refresh(LookupDataAdapter.java:89) ~[graylog.jar:?]
        at org.graylog2.lookup.LookupDataAdapterRefreshService.lambda$schedule$0(LookupDataAdapterRefreshService.java:142) ~[graylog.jar:?]
        at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) [?:1.8.0_161]
        at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:308) [?:1.8.0_161]
        at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$301(ScheduledThreadPoolExecutor.java:180) [?:1.8.0_161]
        at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:294) [?:1.8.0_161]
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [?:1.8.0_161]
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [?:1.8.0_161]
        at java.lang.Thread.run(Thread.java:748) [?:1.8.0_161]


Yeah, except you were missing the context.

What’s the complete configuration of the “switches_lookup_cache” lookup adapter?
Also provide some example entries from the CSV file.


Data Adapter:

  • title: test
  • description: test
  • name: test
  • File path: /etc/graylog/lookup-table.csv
  • check interval: 60
  • separator: ;
  • Quote character: "
  • Key column: key
  • Value column: value


  • cache type: Node-local, in-memory cache
  • title: test cache
  • description: test cache
  • Name test cache
  • maximum entries: 1000
  • Expire after access: 60
    Expire after write: 0 (unchecked)

My csv file:


Please create a bug report at https://github.com/Graylog2/graylog2-server/issues and include all relevant information (including the complete and unredacted logs of your Graylog node).

Hello Jochen,

Ok, thanks.


This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.